Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa
File: nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa (raw, json)
Hash identifier: 3Q/jn3FHXZUVQEH27wPd7CkcjgJ+DjfHku5Vp2ZgSk4=
Subject key identifier: 9D:DE:94:69:5C:5D:FC:3E:EF:B2:BD:DB:93:04:05:EB:E8:32:08:6F
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 018CC8DEB74C7FEA01899B91507E1F74D498
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa
Signing time: Tue 02 Jan 2024 06:31:27 +0000
ROA not before: Tue 02 Jan 2024 06:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30769
IP address blocks: 193.19.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 12:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b7:4c:7f:ea:01:89:9b:91:50:7e:1f:74:d4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jan 2 06:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dde94695c5dfc3eefb2bddb930405ebe832086f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:4a:7d:e9:b0:0d:63:cb:fa:ef:3a:1d:52:
52:de:30:2b:19:6e:6c:af:e8:01:38:3f:8b:2d:14:
b9:8a:f5:08:65:bf:97:90:59:13:e7:b6:62:79:93:
a0:2f:02:e4:d4:4b:32:07:72:8d:24:3c:86:26:43:
0e:5f:2a:cc:4a:b2:2c:f0:57:28:6f:57:43:fd:80:
8c:b0:15:02:a0:b1:43:dd:c3:f2:ce:fe:e4:46:fe:
18:b7:23:58:bf:33:10:8b:1f:37:66:13:34:6d:f2:
1b:5d:f8:68:0a:98:6f:ca:31:4f:64:b1:91:99:97:
74:d6:6d:b4:f0:73:b8:ba:07:a6:6a:5b:15:1d:1a:
b9:90:94:42:c8:a3:21:38:b3:f8:1e:f3:72:63:c8:
ce:ae:a6:26:74:22:8e:42:d8:62:9e:dd:b5:aa:d6:
c7:ae:16:bb:1d:a7:4b:3c:85:8b:d0:2b:31:47:cd:
ec:58:b9:1f:6d:a5:40:e1:8d:c7:b1:0f:68:f3:c4:
62:65:07:54:bf:6d:22:d9:44:cf:2d:3e:cf:98:19:
8b:e9:c1:4f:8f:15:3a:29:fb:42:bb:d1:90:7f:2f:
90:a1:65:aa:e7:db:56:11:1f:0f:b0:be:f4:de:d3:
48:53:aa:f9:e3:37:80:aa:1d:45:4a:81:a9:81:31:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DE:94:69:5C:5D:FC:3E:EF:B2:BD:DB:93:04:05:EB:E8:32:08:6F
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.88.0/23
Signature Algorithm: sha256WithRSAEncryption
39:b1:36:b4:0b:e3:bc:cd:7e:08:d5:40:a7:f1:0a:aa:0a:ed:
cc:cf:63:f6:f0:9e:fb:3c:0b:aa:55:7f:2a:a2:ee:35:c2:73:
e6:72:39:b5:ff:46:3a:c9:e4:bb:c0:cf:94:09:19:35:cf:52:
6a:63:65:97:ac:b9:cd:db:22:20:01:1a:29:8c:d2:34:bf:48:
e2:72:9b:d4:3c:c1:87:3e:10:c9:94:7d:0a:25:e2:6c:f0:78:
6a:a5:d2:71:2e:c6:81:12:a0:5d:67:d5:7d:2a:9d:29:6a:6e:
b3:6f:a4:18:cd:26:9a:bc:a8:5d:4d:48:3e:3d:41:ab:c1:20:
bd:17:c7:f2:8f:56:19:74:28:ff:a3:3c:78:08:18:04:3b:9c:
5a:85:f9:75:3c:ca:2e:a9:1a:c5:d1:a8:bc:e9:e3:63:59:1d:
60:02:bf:10:f5:9e:15:68:48:25:71:6b:de:55:32:f1:4c:6f:
6e:ab:19:7e:2b:d5:89:9b:e3:dc:d8:b2:4a:22:7f:d2:99:1f:
9b:a0:45:01:c2:77:22:3c:a1:1a:15:2d:ed:1d:32:aa:48:95:
1e:7d:79:0a:6e:3a:62:34:c0:b4:5a:9d:3f:b6:86:97:06:6f:
34:e9:d1:68:73:33:ce:3a:f9:4a:2a:9f:76:e8:e4:3c:76:27:
48:be:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 15:32:26 2024 by rpki-client on console-fra.rpki-client.org